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In the Claims : 

Please amend the claims as follows: 

1 . (original) A method for verifying a design of a circuit, comprising: 
providing a model of the design; 

providing a first property for the design, wherein the first property describes a first 
behavior; 

checking the model using the first property and an environment of the design starting at a 
reset state until an example of the first behavior occurs; 

providing a second property for the design, wherein the second property describes a 
second behavior; and 

checking the model using the second property and an environment of the design starting 
at a state when the example of the first behavior occurs. 

2. (original) The method of claim 1, wherein providing the first property comprises: 
providing a statement in a specification language stating that the first behavior does not 

occur. 

3. (original) The method of claim 2, wherein the environment of the design comprises 
one or more environment variables, and wherein checking the model using the first property 
comprises: 

determining a set of values for the environment variables that causes the model of the 
design to show an example of the first behavior. 

4. (original) The method of claim 1, further comprising: 

providing a state of the model of the design when the example of the first behavior 

occurs. 

5. (original) The method of claim 1, further comprising: 
providing the environment of the design starting at the reset state. 
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6. (original) The method of claim 1, further comprising: 

providing the environment of the design starting at a state when the example of the first 
behavior occurs. 

7. (original) The method of claim 6: 

wherein the environment of the design comprises one or more environment variables; 

wherein the model of the design comprises one or more model variables; and 

wherein providing the environment of the design starting at the state when the example of 

the first behavior occurs comprises at least one of the group consisting of: 

describing the state when the example of the first behavior occurs; and 

providing the values of the environment variables and the model variables in each clock 

cycle preceding the example when the first behavior occurs. 

8. (original) A computer program for verifying a design of a circuit, comprising: 
providing a model of the design; 

providing a first property for the design, wherein the first property describes a first 
behavior; 

checking the model using the first property and an environment of the design starting at a 
reset state until an example of the first behavior occurs; 

providing a second property for the design, wherein the second property describes a 
second behavior; and 

checking the model using the second property and an environment of the design starting 
at a state when the example of the first behavior occurs. 

9. (original) The computer program of claim 8, wherein providing the first property 
comprises: 

providing a statement in a specification language stating that the first behavior does not 

occur. 
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10. (original) The computer program of claim 9, wherein the environment of the design 
comprises one or more environment variables, and wherein checking the model using the first 
property comprises: 

determining a set of values for the environment variables that causes the model of the 
design to show an example of the first behavior. 

1 1 . (original) The computer program of claim 8, fiirther comprising: 
providing a state of the model of the design when the example of the first behavior 

occurs. 

12. (original) The computer program of claim 8, fixrther comprising: 
providing the envirormient of the design starting at the reset state. 

13. (original) The computer program of claim 8, further comprising: 

providing the envirormient of the design starting at a state when the example of the first 
behavior occurs. 

14. (original) The computer program of claim 13: 

wherein the envirormient of the design comprises one or more environment variables; 
wherein the model of the design comprises one or more model variables; and 
wherein providing the environment of the design at the state when the example of the 

first behavior occurs comprises at least one of the group consisting of: 

describing the state when the example of the first behavior occurs; and 

providing the values of the environment variables and the model variables in each clock 

cycle preceding the example when the first behaviour occurs. 

15. (new) A semiconductor verified by the method of claim 1 . 

16. (new) A semiconductor verified by the computer program of claim 8. 



